Bug#977038: Confirmed: build-dep on libgrpc-java fixes the issue

[tony mancill]

Hi Sven!

On Fri, Dec 11, 2020 at 11:17:55AM +0100, Sven Mueller wrote:
> libopencensus-java is used via libgoogle-http-client-java
>  ...
> So libopencensus-java depends on grpc-context in io.grpc (provided by
> package libgrpc-java).
> But it turns out that we rebuild against debian-testing as of early
> November, which had version: 0.23.0+ds-1 - and that had no declared
> dependency on libgrpc-java.
> 0.24.0-1 does have that dependency.

I am glad that you brought this to the list.  It gives us an opportunity
to talk about this type of ephemeral bug with transitive dependencies.
The package was FTBFS in testing and the declared dependencies didn't
help expose that.  

In retrospect, what I should have done is either: (a) declare a versioned
dependency on libopencensus-java (which seems wrong, because it's not
the actual version of opencensus that makes the difference); or (b) add
libgrpc-java to the build-deps for anything that uses opencensus, as you
suggested.

Or at a minimum, we could have filed a bug against libopencensus-java
and marked it as affecting all reverse build-deps.

So, my apologies for the confusion this created.  Even though it is
resolved now, it could bite us during a backport, so I am going to add
the dependency on libgrpc-java in the next upload.

Thank you,
tony
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20201211/4f15a22f/attachment.sig>